CVE-RCE

Questo repository non contiene un README...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 Descrizione Vulnerabilità di esecuzione remota di codice non autorizzata in Confluence : CVE-2022-26134 Confluence è un wiki aziendale basato sul web sviluppato dalla società australiana di software Atlassian. Il 2 giugno 2022, Atlassian ha pubblicato un advisory di...

windows-kernel-exploits

windows-kernel-exploits Introduzione windows-kernel-exploits Elenco delle vulnerabilità Security Bulletin KB Descrizione Sistema Operativo CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10, 20 CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerabilit...

pentest-ai-agents

pentest-ai-agents 50 Claude Code-Subagenten für Penetrationstests. Schnellstart | Spickzettel | Abdeckung | Agenten | Beispiele Inhaltsverzeichnis Neuerungen in v3.3 Neuerungen in v3.2 Agentenübersicht Neuerungen in v3.1 Schnellstart Spickzettel Abdeckung...

cve-2022-28944

CVE-2022-28944 Vulnerabilidade de Execução Remota de Código sem Autenticação em Atualização de Múltiplos Produtos do EMCO Software. Uso: python3 cve-2022-28944poc.py Detalhes no relatório em gerr.re. Passos para reproduzir 1. Instale um produto afetado do EMCO Software; 2. Defina o spoof...

cve-2024-4577

cve-2024-4577 poc Auf Schwachstellen prüfen python cve-2024-4577.py -u http://172.16.128.133 Nachdem eine Schwachstelle erkannt wurde, können Sie mit -c einen benutzerdefinierten Befehl ausführen python cve-2024-4577.py -u http://172.16.128.133 -c '?php system'whoami';'...

Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name

Overview A DataObject class-definition field name is concatenated, without an identifier allowlist, into the PHP class source that Pimcore generates for every DataObject class protected $;. A user holding only the ordinary objects DataObjects permission can import a class definition whose field...

GHSA-9X44-4GXF-8C25 Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name

Overview A DataObject class-definition field name is concatenated, without an identifier allowlist, into the PHP class source that Pimcore generates for every DataObject class protected $;. A user holding only the ordinary objects DataObjects permission can import a class definition whose field...

CVE-2026-32475

🔴 CVE-2026-32475 — Elementor Pro Upload Irrestrito de Arquivo → RCE Vulnerabilidade Crítica de Upload Irrestrito de Arquivo no Elementor Pro Potencialmente levando à Execução Remota de Código RCE ⚠️ Visão Geral CVE-2026-32475 é uma vulnerabilidade de segurança crítica que afeta o Elementor Pro , u...

EUVD-2026-67871

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...

CVE-2026-55634 Pimcore: Remote Code Execution via DataObject Class-Definition Field Name

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...

CVE-2026-55634

Pimcore, an open-source Data & Experience Management Platform, is vulnerable to Remote Code Execution via its class-definition import endpoint. Prior to versions 11.5.19, 12.3.10, and 2026.1.6, a DataObject field name is emitted without an identifier allowlist into generated PHP properties (Field...

CVE-2026-9198

CVE-2026-9198 - IBM Langflow OSS Esecuzione Remota di Codice Non Autenticata RCE Vulnerabilità critica di esecuzione remota di codice non autenticata che interessa IBM Langflow OSS. La vulnerabilità deriva dalla combinazione di due debolezze: 1. /api/v1/autologin può rilasciare un bearer token...

blackhat-python3

Python 3 "Black Hat Python" Codice Sorgente Codice sorgente per il libro "Black Hat Python" di Justin Seitz. Il codice è stato completamente convertito a Python 3, riformattato per conformarsi agli standard PEP8 e refactoring per eliminare problemi di dipendenza che coinvolgono l'implementazione ...

CVE-2026-28134

Relatório de Exploração CVE-2026-28134 JetEngine = 3.7.2 — Execução Remota de Código Autenticada Contribuidor+ via SSTI em Twig Data: 11 de março de 2026 Pontuação CVSS: 8.8 Alta Vetor CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Plugin Afetado: JetEngine = 3.7.2 Slug do Plugin: jet-engine...

CVE-2026-15748

CVE-2026-15748 — Forminator Forms: Nicht authentifizierter beliebiger Datei-Upload → RCE CVSS 9.8 Kritisch · Betroffen: Forminator = 1.56.1 · Behoben: 1.56.2 Forscher: daroo Wordfence Bug Bounty, $2.048 · 600.000 aktive Installationen Write-up:...

PageTableInjection

PageTableInjection Iniezione di codice, iniettare payload malicioso attraverso le pagetable pml4. Introduzione Questa è solo una prova di concetto della tecnica di iniezione delle page table per iniettare codice malicioso in processi utente arbitrari. Su Windows e su alcuni sistemi operativi...

GHSA-W23P-WRP7-CH38 Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)

Summary Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource deserializes the hotspots object-store column through the Pimcore\Tool\Serialize::unserialize wrapper without a class allowlist the wrapper's $allowedClasses parameter defaults to true, i.e. fully unrestricted...

CVE-2026-55220 Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource in models/DataObject/ClassDefinition/Data/Hotspotimage.php passes the field hotspots object-store column to...

CVE-2026-55220

Pimcore (Open Source Data & Experience Management Platform) contains an unrestricted deserialization flaw in Hotspotimage::getDataFromResource() . After JSON decoding of the __hotspots object-store column fails, the raw value is passed to Serialize::unserialize() without an allowed-classes whitel...